QuickMergeA PDF can be locked in two quite different ways, and nearly every confused search about this comes down to not knowing which one is in front of you. One is real cryptography. The other is a note asking software to behave, which plenty of software ignores.
If you can already open the document and simply want to stop retyping the password, the PDF unlocker removes it in your browser — neither the file nor the password is uploaded. The rest of this is which situation you are in and what each one allows.
Two locks, two different problems
| User password | Owner password | |
|---|---|---|
| Symptom | Prompts before you see a page | Opens, but printing or copying is greyed out |
| Enforced by | AES-256 encryption | Whichever reader you are using |
| Removable without it? | No | Often, yes |
| Real security? | Yes | No — a statement of intent |
Removing a password you know
This is the common and entirely legitimate case: a bank statement, a payslip, an insurance document that arrives encrypted and prompts every single time you open it. You have the password. You are tired of typing it.
Load it into the unlocker, enter the password you already use, and download a decrypted copy. Both the document and the password are processed on your device through qpdf compiled to WebAssembly — nothing is transmitted, which is the point when the file is a statement with your account number on it.
The copy you get is an ordinary unprotected PDF, so treat it accordingly. If the original was encrypted for a reason, keep the decrypted copy local rather than emailing it on.
When it opens but will not print
If the document opens normally and printing, copying or editing is greyed out, that is an owner password — permission flags stored in the file that ask the reader to disallow certain actions. They are not encryption. There is no key protecting the content, and the file is fully readable; the reader is choosing to honour a request.
Which is why the same PDF often prints without complaint from a different application. Chrome and Firefox frequently ignore these flags entirely, so opening the file in a browser and printing from there is the first thing to try and it works more often than not. Removing the flags properly is a much weaker operation than decryption, and it is worth understanding that a document protected only this way was never really protected.
When you do not have the password
Here is the straight answer: if a PDF has a user password and you do not have it, the document is not recoverable. AES-256 without the key is not a puzzle with a shortcut; it is arithmetic with no solution in any useful amount of time. A tool advertising itself as a PDF unlocker that opens files without the password is either working only on the owner-password case above, attacking passwords weak enough to guess, or collecting your document.
What is worth trying first: the password is very often something predictable that the issuer chose for you. Banks and payroll systems commonly use a date of birth in some format, the last four digits of an account, a postcode, or a national insurance or social security number. Check the covering email — the format is usually stated there, and people rarely read that far.
If it was your own password, your password manager or browser may still have it saved. If none of that works, go back to whoever issued the document and ask for another copy. That is faster than anything else, and it is the only honest route.
Locking a PDF properly
Going the other way, protect PDF applies real AES-256 encryption in your browser. Two things decide whether that actually protects anything.
The password is the weak point, not the cipher. AES-256 will not be broken; a guessable password will be, and an attacker holding the file can try candidates offline as fast as their hardware allows, with nothing to rate-limit them. Generate a strong one rather than reusing something memorable.
Set an open password, not just permissions. Restricting printing while leaving the document openable protects nothing, for the reasons above. If it matters that the wrong person cannot read it, the open password is the control that does the work.
On macOS, Preview can also do this through File → Export as PDF with the Encrypt option. Windows ships nothing that protects an existing PDF, which is why most people encrypting one on Windows end up on a website — and why it matters whether that website uploads the file.
Sending a protected PDF
One habit undoes most of this. A password emailed in the same thread as the encrypted file protects against nothing except a mistyped address — anyone reading the thread has both halves. Send the password by a different route: a phone call, a message on another service, anything that is not the channel carrying the document.
And record it somewhere durable before you send the file. There is no recovery, and here that is literal: nothing was uploaded, so there is no copy on a server and no support route that can bypass it.
Frequently asked questions
How do I deactivate the password on a PDF?
Load it into the unlocker, enter the password you currently use to open it, and download the decrypted copy — it will never ask again. Both the file and the password are processed on your device and neither is transmitted.
Can a PDF unlocker open a file without the password?
Not one that is telling the truth, if the file has a real open password. AES-256 without the key has no shortcut. Tools claiming otherwise either work only on permission flags, guess weak passwords, or are collecting your document.
How do I print a secured PDF that will not let me?
That is a permission flag rather than encryption, and it is enforced by the reader rather than by cryptography. Open the file in Chrome or Firefox and print from there — browsers frequently ignore these flags, and this works more often than not.
I have forgotten the password on a PDF sent to me. What now?
Check the covering email first: issuers usually state the format, and it is very often a date of birth, the last four digits of an account, or a postcode. Failing that, ask the issuer for another copy. There is no way to recover a strong password.
How do I lock a PDF so people cannot edit it?
Set an open password with protect PDF, which applies real AES-256. Permission flags that only restrict editing are honoured by the reader rather than enforced, so plenty of software ignores them entirely.
How do I encrypt a PDF for email?
Apply a password, then send the password by a different channel — a call or a message on another service. A password in the same email as the file it protects adds nothing except protection against a mistyped address.
Is my password sent anywhere when I unlock a PDF here?
No. Decryption runs in your browser through qpdf compiled to WebAssembly, so the password is used locally and discarded when the tab closes. You can verify that with the method on the proof of privacy page.
In short
The distinction is the whole thing: an open password is real and cannot be bypassed, while permission flags are a request that software may ignore. Work out which you have before spending time on it, and when you lock a document yourself, use an open password and send it separately.
Remove a PDF password you already know
Decrypted in your browser with qpdf. The file and the password never leave your device.
Open the PDF unlocker
Written by Mehran
Founder of QuickMerge. Practical guides built around the real behavior and limits of the tools. Connect on LinkedIn.